In the claims: 

Following is a complete set of claims as amended with this Response. 

1 . (Currently Amended) A method comprising: 

registering a first network device and a second network device to a policy server; 
receiving network discovery policies from the policy server at the first and second 
network devices; 

identifying the second network device at the first network device in accordance 
with the received policies; 

sending a message from the first network device to the second network device, the 
message establishing the identity of any network device between the first network device 
and the second network device in accordance with the received policies; a^id 

compiling the established identities to determine the topology of the network. 

2. (Original) The method of Claim 1 , wherein identifying the second 
network device comprises receiving an address of the second network device from a third 
network device. 

3. (Original) The method of Claim 1 , wherein the first network device 
comprises a plurality of network interfaces, the method fiirther comprising selecting an 
interface to the second device by sending a packet from each of the plurality of network 
interfaces to an address of the second network device and selecting an interface that 
corresponds to any reply received from the second network device. 

4. (Original) The method of Claim 3, wherein sending a packet from 
each of the plurality of network interfaces comprises sending a PING packet from each of 
the plurality of network interfaces. 
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5. (Original) The method of Claim 1 , wherein sending the message 
comprises sending a plurality of messages to the second network device, each message 
having an incrementally greater time to live until a message reaches the second network 
device. 

6. (Currently Amended) The method of Claim 1, wherein sending the 
message comprises executing a Trac e rout e route tracing utility at the first network device 
to determine the route of a packet between the first and second network device. 

7. (Currently Amended) The method of Claim 1, further comprising: 
identifying a third network device at the first network device; and 

sending a message fi-om the first network device to the third network device, the 
message establishing the identity of any network device between the first network device 
and the third network device. 

8. (Original) The method of Claim 1 , fijrther comprising sending a 
packet to a third network device to provoke the third network device to identify an 
address corresponding to a port at which the packet was received and wherein compiling 
fiirther comprises compiling the identified address. 

9. (Original) The method of Claim 1 , further comprising sending a 
packet to a third network device addressed to a port that does not exist on the third 
network device in order to provoke the third network device to send an error message to 
the first network device that identifies an address of the third network device 
corresponding to the port at which the packet was received and wherein compiling fiirther 
comprises compiling the identified address. 
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1 0. (Currently Amended) A machine-readable medium having stored thereon 
data representing sequences of instructions which, when executed by a machine, cause 
the machine to perform operations comprising: 

registering a first network device and a second network device to a policy server; 
receiving network discovery policies from the policy server at the first and second 
network devices; 

identifying the a second network device at the a first network device in 
accordance with the received policies; 

sending a message from the first network device to the second network device, the 
message establishing the identity of any network device between the first network device 
and the second network device in accordance with the received policies; ^id 

compiling the established identities to determine the topology of the network. 

1 1 . (Original) The medium of Claim 1 0, wherein the instructions for 
identifying the second network device fiirther comprise instructions which, when 
executed by the machine, cause the machine to perform fiirther operations comprising 
receiving an address of the second network device from a third network device. 

12. (Original) The medium of Claim 10, wherein the first network device 
comprises a plurality of network interfaces, the instructions fiirther comprising 
instructions which, when executed by the machine, cause the machine to perform fiirther 
operations comprising selecting an interface to the second device by sending a packet 
from each of the plurality of network interfaces to an address of the second network 
device and selecting an interface that corresponds to any reply received from the second 
network device. 
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13. (Original) The medium of Claim 10, wherein the instructions for 
sending the message further comprise instructions which, when executed by the machine, 
cause the machine to perform further operations comprising sending a plurality of 
messages to the second network device, each message having an incrementally greater 
time to live until a message reaches the second network device. 

14. (Currently Amended) The medium of Claim 10, further comprising 
instructions, when executed by the machine, cause the machine to perform further 
operations comprising: 

identifying a third network device at the first network device; mid 

sending a message from the first network device to the third network device, the 

message establishing the identity of any network device between the first network device 

and the third network device. 

15. (Original) The medium of Claim 10, further comprising instructions 
which, when executed by the machine, cause the machine to perform further operations 
comprising sending a packet to a third network device to provoke the third network 
device to identify an address corresponding to a port at which the packet was received 
and wherein the instructions for compiling comprise further instructions which, when 
executed by the machine, cause the machine to perform further operations comprising 
compiling the identified address. 

16. (Currently Amended) A method comprising: 

registering a first network device and a second network device to a policy server; 
receiving network discovery poHcies fi"om the policy server at the first and second 
network devices; 
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identifying the second network device at the first network device in accordance 
with the received poHcies; 

sending a route tracing packet Trac e rout e m e ssag e from the first network device 
to the second network device, to determine addresses of any network device between the 
first network device and the second network device in accordance with the received 
poUcies; and 

compiUng the addresses to determine the topology of the network. 

1 7. (Previously Presented) The method of Claim 1 6, wherein 
identifying the second network device comprises receiving an identification of the second 
network device, including its address from a policy server. 

18. (Original) The method of Claim 16, wherein the first network device 
comprises a plurality of network interfaces, the method fiirther comprising selecting an 
interface to the second device by sending a PING message from each of the plurality of 
network interfaces to an address of the second network device and selecting an interface 
that corresponds to any reply received to the PING message from the second network 
device. 

19. (Currently Amended) The method of Claim 16, wherein the route tracing 
packet Trac e rout e m e ssag e comprises a plurality of messages to the second network 
device, each message having an incrementally greater time to live until a message reaches 
the second network device. 

20. (Original) The method of Claim 16, fiirther comprising sending a 
packet to a third network device addressed to a port that does not exist on the third 
network device in order to provoke the third network device to send an error message to 
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the first network device that identifies an address of the third network device 
corresponding to the port at which the packet was received and wherein compiling further 
comprises compiling the identified address. 

2 1 . (Previously Presented) The method of Claim 1 , further comprising 
sending the established identities to the poUcy server in accordance with the received 
policy. 

22. (Previously Presented) The method of Claim 21 wherein compiling 
comprises compiling the established identities at the policy server to determine the 
topology of the network. 
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